Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FD26E6618B11F19B67EC16CF1D38B0.roa
File: 83FD26E6618B11F19B67EC16CF1D38B0.roa (raw, json)
Hash identifier: GCotGdTaLncxo/NzEh19C454lxD1QejDkuzRkZacDJk=
Subject key identifier: 41:77:DC:EF:E2:B3:79:99:E4:B2:57:95:87:A1:2F:C4:20:EC:2E:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D20D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FD26E6618B11F19B67EC16CF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:38:47 +0000
ROA not before: Sat 06 Jun 2026 09:38:42 +0000
ROA not after: Mon 13 Jul 2026 09:38:42 +0000
asID: 137897
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119309 (0x1d20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:38:42 2026 GMT
Not After : Jul 13 09:38:42 2026 GMT
Subject: CN=6a23eaa7-06d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:c9:6c:44:bf:26:80:0a:93:55:7b:32:1f:
fb:38:09:96:fe:96:89:34:3d:87:6d:04:93:7f:04:
9f:fb:b5:50:e7:46:81:b7:93:1c:b8:70:ca:b9:56:
3a:ce:83:98:5c:78:94:b0:5d:e2:e5:95:29:9a:07:
1b:0b:f5:5f:32:b9:91:ea:36:3d:7f:dc:3e:b4:49:
16:55:aa:c1:c4:29:f6:5b:67:fe:cb:b3:79:55:7f:
d8:53:56:da:2e:e7:b7:0a:b3:65:ac:fb:2c:6a:5a:
3c:5a:14:47:b0:ca:56:42:53:09:61:f1:2a:e8:06:
63:d7:49:97:8a:3a:95:d1:28:6c:af:c3:4c:18:6e:
d0:9c:e5:93:ab:f4:50:9e:f8:06:1e:13:31:ba:0f:
f2:90:e1:3a:2b:2c:f6:e2:53:7a:ba:04:8e:09:37:
4f:70:15:ff:f6:ca:6d:1f:b4:c3:5e:eb:0b:2d:69:
9c:18:fc:95:6f:97:90:5c:8d:7b:55:4f:16:8a:90:
aa:54:1f:92:f9:62:82:e5:6a:60:f2:0f:47:e1:53:
0b:af:8f:50:e5:5a:ca:1a:69:3a:f6:00:4b:15:f4:
39:11:d1:e8:05:4e:1c:23:f1:b9:9a:f3:22:4b:9f:
e1:7d:85:83:8b:4a:87:46:4d:77:c4:19:bc:c1:1d:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:77:DC:EF:E2:B3:79:99:E4:B2:57:95:87:A1:2F:C4:20:EC:2E:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83FD26E6618B11F19B67EC16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:f8:f6:88:77:42:35:c8:5f:17:fb:a8:1f:cd:37:d5:26:73:
e4:fd:41:27:1d:c7:6a:8f:70:28:71:a6:8e:1e:60:15:5b:bd:
5a:ab:d8:b1:cb:68:0d:a7:df:9e:6e:df:25:7e:b0:35:09:e6:
4b:53:ee:4b:06:7f:b9:d3:eb:2a:44:a2:d0:01:ef:c9:dc:11:
3b:24:16:44:3d:fa:0f:7e:07:b4:fb:5e:98:9a:f7:e9:b3:31:
87:20:8a:f7:43:f6:22:b7:23:e6:f8:59:83:81:d3:df:7c:7e:
6f:55:db:d3:22:9e:3a:36:dc:cf:f3:35:80:28:27:b4:8e:b8:
ac:b3:f0:d8:53:05:53:b8:de:2f:df:09:92:2e:de:1e:45:55:
a0:09:a9:70:9d:83:4e:c0:0a:dc:48:6f:55:75:21:67:5a:9f:
a6:3d:f5:94:6c:3a:9b:97:71:ed:de:27:4e:59:ae:b8:f6:52:
35:5e:44:3c:7f:45:d8:e2:39:37:62:49:28:4b:12:f6:55:42:
ab:a0:ec:fd:9a:bf:47:c3:99:67:e8:b9:09:b7:54:4c:54:21:
88:fc:3a:45:a8:57:ff:d5:63:0d:03:2e:cb:8f:89:70:52:a4:
0f:ba:3c:8c:d8:bc:84:26:8a:bb:a9:b4:e8:c3:e4:a9:10:85:
88:53:c9:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAdINMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNjA2MDkzODQyWhcNMjYwNzEzMDkzODQyWjAYMRYw
FAYDVQQDEw02YTIzZWFhNy0wNmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA16rJbES/JoAKk1V7Mh/7OAmW/paJND2HbQSTfwSf+7VQ50aBt5McuHDK
uVY6zoOYXHiUsF3i5ZUpmgcbC/VfMrmR6jY9f9w+tEkWVarBxCn2W2f+y7N5VX/Y
U1baLue3CrNlrPssalo8WhRHsMpWQlMJYfEq6AZj10mXijqV0Shsr8NMGG7QnOWT
q/RQnvgGHhMxug/ykOE6Kyz24lN6ugSOCTdPcBX/9sptH7TDXusLLWmcGPyVb5eQ
XI17VU8WipCqVB+S+WKC5Wpg8g9H4VMLr49Q5VrKGmk69gBLFfQ5EdHoBU4cI/G5
mvMiS5/hfYWDi0qHRk13xBm8wR3FEwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEF3
3O/is3mZ5LJXlYehL8Qg7C7nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84M0ZEMjZFNjYxOEIxMUYxOUI2N0VDMTZDRjFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlwKMA0GCSqGSIb3DQEB
CwUAA4IBAQC9+PaId0I1yF8X+6gfzTfVJnPk/UEnHcdqj3AocaaOHmAVW71aq9ix
y2gNp9+ebt8lfrA1CeZLU+5LBn+50+sqRKLQAe/J3BE7JBZEPfoPfge0+16Ymvfp
szGHIIr3Q/YityPm+FmDgdPffH5vVdvTIp46NtzP8zWAKCe0jriss/DYUwVTuN4v
3wmSLt4eRVWgCalwnYNOwArcSG9VdSFnWp+mPfWUbDqbl3Ht3idOWa649lI1XkQ8
f0XY4jk3YkkoSxL2VUKroOz9mr9Hw5ln6LkJt1RMVCGI/DpFqFf/1WMNAy7Lj4lw
UqQPujyM2LyEJoq7qbTow+SpEIWIU8lE
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:25 2026 by rpki-client